bdl77 Privacy Policy — How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") sets out the basis on which bdl77 ("bdl77", "we", "us", "our") collects, processes, stores, and discloses personal data obtained from players, visitors, and registered users ("you", "your") who access or use the bdl77 online casino and sports betting platform at https://bdl77.io (the "Platform").

bdl77 is committed to protecting and respecting the privacy of all users, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh. We process personal data in a manner that is lawful, fair, and transparent, and we take our obligations in this regard with the utmost seriousness.

This Policy should be read together with the bdl77 Terms and Conditions, which govern your general use of the Platform and are incorporated by reference into this Policy.

2. Data Controller Information

For the purposes of this Privacy Policy, bdl77 acts as the data controller in respect of personal data collected through the Platform. The data controller is responsible for deciding how and why your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the bdl77 data protection team using the contact details provided in Section 15 of this Policy. We will acknowledge your communication and endeavour to respond substantively within five business days of receipt.

3. Data We Collect

Depending on how you interact with the bdl77 Platform, we may collect and process the following categories of personal data:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including district, division, and postal code
• Email address used to register your bdl77 account
• Mobile phone number (used for verification and account security)
• National Identity Card (NID) number or passport number, where provided for KYC verification

3.2 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits or withdrawals
• Bank account details (account number, branch, bank name) where bank transfer is used
• Transaction history, including deposit amounts, withdrawal amounts, dates, and methods
• Betting and gaming history, including stake amounts, game selections, and outcomes
• Account balances and bonus balances held on the Platform at any given time

3.3 Technical & Usage Data

• IP address and approximate geographic location derived from it
• Browser type, version, and operating system
• Device identifiers and device type (desktop, mobile, tablet)
• Pages visited on the Platform, time spent on each page, and navigation paths
• Session start and end times, in Bangladesh Standard Time (BST, UTC+6)
• Referral source (how you arrived at the bdl77 Platform)

3.4 Communications Data

• Content of support messages, live chat transcripts, and email correspondence with the bdl77 team
• Responses to optional surveys or feedback requests
• Records of marketing consent and opt-out preferences

4. How We Collect Your Data

bdl77 collects personal data through the following means:

4.1 Direct Interactions

You provide personal data directly when you register a bdl77 account, complete KYC verification, make a deposit, request a withdrawal, contact our support team, or respond to a promotional communication. All data submitted through these interactions is stored securely on bdl77 servers.

4.2 Automated Technologies

As you navigate the Platform, bdl77 automatically collects technical and usage data through cookies, server logs, and similar technologies. This data is used to maintain the security and functionality of the Platform and to improve the player experience over time. Further details on our use of cookies are set out in Section 9 of this Policy.

4.3 Third Parties

bdl77 may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification and KYC service providers, who assist in confirming the authenticity of identification documents submitted during registration
• Payment processors, including mobile financial service providers such as bKash and Nagad, who may share transaction confirmation data with bdl77
• Fraud prevention and anti-money laundering screening services, which may flag accounts associated with known fraudulent activity

5. Legal Basis for Processing

bdl77 processes your personal data on the following legal bases, depending on the specific processing activity in question:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (the bdl77 Terms and Conditions)
Processing deposits and withdrawals	Performance of a contract; legal obligation
KYC identity verification	Legal obligation (anti-money laundering compliance)
Fraud prevention and security monitoring	Legitimate interests of bdl77 and its players
Sending transactional communications	Performance of a contract
Sending promotional and marketing communications	Your explicit consent (which may be withdrawn at any time)
Improving Platform functionality and user experience	Legitimate interests of bdl77
Compliance with legal and regulatory obligations	Legal obligation

6. How We Use Your Data

bdl77 uses the personal data it collects for the following purposes:

• To create and maintain your bdl77 account, including verifying your identity and age eligibility (21+ requirement)
• To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, including bKash, Nagad, Rocket, Upay, or linked bank account
• To administer bonuses, promotions, and loyalty rewards in accordance with applicable offer terms
• To detect and prevent fraud, money laundering, account takeover, and other prohibited conduct as defined in the bdl77 Terms and Conditions
• To respond to your support enquiries and resolve disputes in a timely manner
• To send you essential transactional communications, including deposit confirmations, withdrawal notifications, and security alerts
• To send promotional communications about bdl77 offers, new game launches, and seasonal promotions — where you have provided consent to receive such communications
• To improve the design, performance, and content of the bdl77 Platform based on aggregated usage data
• To fulfil our legal and regulatory obligations, including anti-money laundering (AML) and counter-financing of terrorism (CFT) requirements
• To enforce the bdl77 Terms and Conditions and protect the rights and safety of all players on the Platform

7. Sharing Your Data

bdl77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers

bdl77 engages trusted third-party service providers to assist in operating the Platform. These providers are permitted to use your data only to perform specific services on our behalf and are bound by data processing agreements that prohibit any other use. Categories of service provider include:

• Payment processing services (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and linked banking partners)
• KYC and identity verification platforms
• Fraud detection and AML screening services
• Cloud infrastructure and hosting providers who store Platform data on secured servers
• Customer support platform providers
• Email delivery and communication service providers

7.2 Game Studios & Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a limited set of technical data (such as session identifiers) to enable game functionality. These providers do not receive your full personal profile, financial data, or contact details.

7.3 Legal & Regulatory Disclosures

bdl77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bdl77, its players, or the public. bdl77 will only make such disclosures to the extent strictly required by law.

7.4 Business Transfers

In the event that bdl77 undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its assets, personal data held by bdl77 may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the same data protection standards as set out in this Privacy Policy, and affected players will be notified in advance where practicable.

8. Payment Data & Financial Records

When you make a deposit or request a withdrawal on bdl77, your transaction is processed through your selected payment gateway. bdl77 does not store full card numbers, CVV codes, or full mobile banking PINs on its servers at any point. Payment data handled by bdl77 is limited to transaction references, amounts, timestamps, and the last four digits of any card used, where applicable.

All payment-related data is processed and stored in accordance with applicable financial data protection standards. Communication between the bdl77 Platform and payment processors is conducted over encrypted channels at all times.

Financial transaction records are retained by bdl77 for a minimum of five years following the date of each transaction, in accordance with standard financial record-keeping obligations. These records may be reviewed in the event of a dispute, withdrawal investigation, or regulatory enquiry.

9. Cookies & Tracking Technologies

bdl77 uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device, maintain your session, and remember certain preferences between visits.

9.1 Types of Cookies Used by bdl77

Cookie Type	Purpose	Retention
Strictly Necessary	Enable core Platform functions such as login sessions and account security. Cannot be disabled.	Session
Functional	Remember your language, display preferences, and recent game history.	Up to 12 months
Performance / Analytics	Collect aggregated, anonymised data on how players navigate the Platform to inform improvements.	Up to 24 months

bdl77 does not use advertising cookies or third-party retargeting cookies. Your browsing behaviour on bdl77 is not shared with external advertising networks.

9.2 Managing Cookies

You may configure your browser to refuse some or all cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your bdl77 account and using core Platform features. Instructions for managing cookies are available through your browser's help documentation.

10. Data Retention

bdl77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Active account data: Retained for the duration of your active account plus five years following account closure.
• Transaction and financial records: Retained for a minimum of five years following each transaction date, in line with financial record-keeping requirements.
• KYC and identity documents: Retained for five years following account closure or the completion of the last transaction, whichever is later.
• Support and communication records: Retained for three years from the date of last interaction.
• Marketing preference records: Retained until you withdraw consent, plus one year thereafter for compliance record-keeping.
• Technical and usage logs: Retained for up to thirteen months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

11. Data Security

bdl77 implements a range of technical and organisational measures to protect the personal data it holds against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bdl77 Platform
• Bcrypt or equivalent hashing for all stored account passwords — plain-text passwords are never stored
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function
• Regular internal security reviews and penetration testing of Platform infrastructure
• Incident response procedures that include player notification protocols in the event of a confirmed data breach affecting your personal data

12. Your Rights

As a player and data subject, you hold the following rights in relation to the personal data bdl77 processes about you. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: You may request a copy of the personal data bdl77 holds about you and information about how it is used.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by bdl77 be corrected or completed.
• Right to Erasure: In certain circumstances, you may request that bdl77 delete your personal data. This right is subject to legal and regulatory retention obligations that may require us to retain certain data even after a deletion request.
• Right to Restriction of Processing: You may request that bdl77 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request that bdl77 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on bdl77's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bdl77 will respond to all legitimate data rights requests within a reasonable timeframe. In some cases, we may need to verify your identity before processing a request. There is no charge for exercising your rights in ordinary circumstances.

13. Children & Minors

The bdl77 Platform is strictly for adults aged 21 and above. bdl77 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by or in respect of a person under 21, we will take immediate steps to delete that data and close the relevant account.

If you believe that a person under 21 has registered an account on bdl77 or that a minor has access to an existing account, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

14. Changes to This Policy

bdl77 reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, where we propose to use your data for a new purpose or share it with a new category of third party — we will provide advance notice via email to your registered address or through an on-Platform notification, and where required by law we will seek your renewed consent.

The effective date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed of how bdl77 protects your data. Your continued use of the Platform following any amendment constitutes acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdl77 processes your personal data, please contact our data protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, inside your bdl77 account dashboard
• Response Time: We aim to acknowledge all privacy-related enquiries within one business day and to respond substantively within five business days of receipt
• Support Hours: Around the clock, in Bangladesh Standard Time (BST, UTC+6)

All formal privacy notices and data rights requests submitted to bdl77 must be made in writing via email to [email protected]. Requests submitted through other channels may be acknowledged but will be directed to email for formal processing.